Privacy Policy
KohTrip is committed to protecting your personal data in compliance with GDPR and Thailand's Personal Data Protection Act (PDPA).
1. Data controller
Company: Southeast Asia Co., Ltd. · Registration: 0845567018501 · TAT Licence: 44/00448 · Location: Koh Samui, Surat Thani, Thailand · Email: info@kohtrip.com
2. Data we collect
- Personal information — name, email, phone, for booking verification
- Payment data — processed by a PCI-compliant payment provider, never stored on our own servers
- Booking data — tour selections, dates, preferences
- Technical data — IP address, browser and device type
3. How we use your data
Contractual necessity (processing bookings, payments, customer support); legitimate interests (improving the service, fraud prevention); legal obligations (tax and accounting under Thai law); and consent (marketing emails, non-essential cookies).
4. Your rights (GDPR / PDPA)
Access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Exercise any of these by emailing info@kohtrip.com — we respond within 30 days.
5. Data security
TLS encryption for all data in transit, PCI-DSS-compliant payment processing, and staff access limited to a need-to-know basis.
6. Data retention
Booking data: 7 years (tax and legal requirements). Marketing data: until you unsubscribe.
7. Cookies & local storage
Necessary cookies and storage are always on: your chosen language and currency, your booking session, your cookie choice (12 months) and, if you enable offline reading, a local cache of pages you've already visited on your own device.
Analytics (Google Analytics 4) and marketing (Meta Pixel, Google Ads, and a 30-day first-party cookie that remembers which ad or link brought you here) load only if you allow them in the cookie bar. Nothing non-essential runs before your choice, and you can change it at any time with “Cookie settings” at the foot of every page.
8. Contact
Questions about this policy: info@kohtrip.com, or our Contact page.